[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Simon raised the question of having negative assertions in SDSI.
I would like to note that SDSI does support strong negative assertions
for group membership; a server can indeed give a ``negative membership
SDSI has no other form of negative assertion, probably because the only
other real form of assertion in SDSI is a name/value binding, and it is
not clear what a negative name/value assertion's function would be.
[SDSI paper is a http://theory.lcs.mit.edu/sdsi.ps or .tex]